High severity8.8NVD Advisory· Published May 4, 2020· Updated Jun 17, 2026
CVE-2020-12109
CVE-2020-12109
Description
Certain TP-Link devices allow Command Injection. This affects NC200 2.1.9 build 200225, NC210 1.0.9 build 200304, NC220 1.3.0 build 200304, NC230 1.3.0 build 200304, NC250 1.3.0 build 200304, NC260 1.5.2 build 200304, and NC450 1.5.3 build 200304.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
32cpe:2.3:o:tp-link:nc200_firmware:2.1.6:160108_b:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:nc200_firmware:2.1.6:160108_b:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc200_firmware:2.1.9:200225:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc210_firmware:1.0.3:160229:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:tp-link:nc210_firmware:1.0.3:160229:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc210_firmware:1.0.4:160412:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc210_firmware:1.0.9:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc220_firmware:1.2.0:170516:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:tp-link:nc220_firmware:1.2.0:170516:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc220_firmware:1.3.0:180105:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc220_firmware:1.3.0:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc230_firmware:1.0.3:160108:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:tp-link:nc230_firmware:1.0.3:160108:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc230_firmware:1.2.1:170515:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc230_firmware:1.3.0:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc250_firmware:1.0.10:160321:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:tp-link:nc250_firmware:1.0.10:160321:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc250_firmware:1.0.8:160108:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc250_firmware:1.2.1:170515:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc250_firmware:1.3.0:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc260_firmware:1.0.5:160804:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:tp-link:nc260_firmware:1.0.5:160804:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.0.6:161114:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.4.1:180720:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.5.0:181123:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc260_firmware:1.5.2:200304:*:*:*:*:*:*
cpe:2.3:o:tp-link:nc450_firmware:1.0.15:160920:*:*:*:*:*:*+ 3 more
- cpe:2.3:o:tp-link:nc450_firmware:1.0.15:160920:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.1.2:161013:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.3.4:171130:*:*:*:*:*:*
- cpe:2.3:o:tp-link:nc450_firmware:1.5.3:200304:*:*:*:*:*:*
- TP-Link/TP-Link devicesdescription
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/157531/TP-LINK-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/159222/TP-Link-Cloud-Cameras-NCXXX-Bonjour-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- seclists.org/fulldisclosure/2020/May/2nvdExploitMailing ListThird Party Advisory
- www.tp-link.com/us/securitynvdVendor Advisory
News mentions
0No linked articles in our index yet.